Anselm 0.1.4

The first release after Anselm went public. The headline items:

• Liquid Glass icon on macOS 26. The app icon is now an Icon Composer bundle, so it renders with the Tahoe glass treatment instead of a flat image in a ring. macOS 12–15 keep the classic icon.
• The free tier heals itself. If the managed credential on disk can no longer be decrypted (a migrated keychain, a reinstalled OS), Anselm rebuilds it on the next launch. No more "restore your free tier" click on a fresh install.
• Master-key changes no longer brick the app. A rotated login keychain used to leave the sidecar unable to connect; it now regenerates the device proof and carries on.
• Sandbox and search hardening. Symlink and hardlink extraction can't escape the sandbox root, and grep/glob deny rules apply per match rather than per directory (the four real findings from the CodeQL triage).
• A product reel in the README, recorded from the real app with scripted model replies so it's reproducible: make -C frontend demo DATASET=story LOCALE=en AUTOPLAY=promo.

Install: brew install --cask Cookiezisg/tap/anselm, or grab the DMG / AppImage / deb / Windows installer below. macOS builds are signed and notarized; existing users get this through in-app update. Windows builds are unsigned for now, so SmartScreen will ask you to confirm.

---

Features

• macos: Icon Composer app icon for macOS 26 (fdbcd71)
• design: Row-size AnState for empty slots inside settings cards (681755c)
• demo: The product reel, recorded from the real app (10a523f)

Fixes

• bootstrap: Survive a master-key change instead of refusing to start (2df4c99)
• skillfs: Linux os.Root escape error is a rejected path, not a 500 (98a413f)
• ci: Host-independent tests and an embed-worker start-up race (de69815)
• freetier: Repair a managed credential that no longer decrypts (af269e3)
• security: Close the four real findings from the CodeQL triage (76c05f1)

Documentation

• Social preview card for the GitHub repositories (6a62c95)
• Mention the SignPath Foundation application on the install section (4c656df)
• Windows builds stay unsigned for now (21f2372)
• readme: Lead with zero-config, name Ollama and compatible endpoints (1218945)

Maintenance

• Mark slang i18n output as generated for Linguist (4530914)
• github: Issue templates and website contact link (b1f43a2)
• repo: CI, CodeQL, Dependabot, release notes, community files, Anselm bundle name (507e451)
• deps: Golang.org/x/image 0.45.0 (GO-2026-6222, VP8L decode allocation) (a1bd4c1)
• Keep frontend test logs when a group dies without a failure block (809c312)
• speech: Wait for teardown after an error frame instead of one fixed flush (33e8472)
• dependabot: Pub group is minor/patch only; majors are migrations (81175f2)
• deps: Bump golang.org/x/sys (#11) (3b0cb72)
• deps-dev: Bump the node group across 1 directory with 2 updates (#13) (fbd217d)
• deps: Bump the actions group across 1 directory with 7 updates (#14) (ccac823)
• deps: Bump the go group across 1 directory with 6 updates (#12) (dfe9cb0)
• deps: Bump the dart group across 1 directory with 15 updates (#17) (316dbc0)

Demo

• The reel tours the scheduler, the filed digest and the workflow page (49947fb)

Full changelog: v0.1.3...v0.1.4

Anselm 0.1.3

Full Changelog: v0.1.2...v0.1.3

Anselm 0.1.2

Full Changelog: v0.1.1...v0.1.2

Anselm 0.1.1

Full Changelog: v0.1.0...v0.1.1

Anselm 0.1.0

What's Changed

• Revamp a bit by @Cookiezisg in #1
• Enhance backend architecture with API key management and security features by @Cookiezisg in #2
• docs(test-pipeline): add iteration 1 design doc + progress log entry by @Cookiezisg in #3
• docs: 立 §S19 Dev log 节制规范 + 压缩 progress-record 后段密度 by @Cookiezisg in #4
• backend-review: 全后端发版审查 + 统一搜索服务（BM25+RAG） by @Cookiezisg in #5
• exec-observability: 执行中间信息可见——三链 logs 落盘 + LLM 查询面补洞 by @Cookiezisg in #6
• product-review + acceptance-review：全产品闭环审计 + 真机验收（两轮）——30 findings 全处置、95 黑盒场景 + 12 金标旅程落地 by @Cookiezisg in #8
• 后端 API 契约标准化（S1–S9）：统一前端心智 + 文档全同步 by @Cookiezisg in #9
• 前端重建全量:三岛壳+四海洋+设计系统收敛+流式侧幕完整体 by @Cookiezisg in #10

New Contributors

• @Cookiezisg made their first contribution in #1

Full Changelog: https://github.com/Cookiezisg/Anselm/commits/v0.1.0